Archive
All posts
3 published posts.
FeaturedHackTheBox
Facts - HackTheBox
A mass assignment in Camaleon CMS that makes you admin, S3 credentials hidden in the panel, an encrypted SSH key, and facter running as root. Full writeup of the Facts machine.
HTB CWES review (the old CBBH)
HackTheBox renamed the CBBH to CWES (Certified Web Exploitation Specialist) and added API and GraphQL modules. My take on the training, the 7-day exam, and who it actually makes sense for.
babyFirstCrackme - crackmes.one
A level 1 crackme from crackmes.one to warm up: finding the password of a C binary that checks with strcmp. With strings, ltrace, and Ghidra, three ways to the same place.